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Listing and Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

Listing of the Claims 

1. (previously presented) A method for providing a secure 
communications session with a user terminal in a communications network, the 
method comprising the steps of: 

transmitting a secure key and a secure seed to the user terminal using a 
secure communications method, the secure key and the secure seed being suitable 
for storage in the user terminal for use during the secure communications session; 

encrypting and transmitting data to the user terminal using a current session 
key, and receiving and decrypting data received from the user terminal using the 
current session key, the secure key initially being used as the current session key; 
and 

periodically generating by an access point a subsequent session key using 
the secure seed and using the subsequent session key as the current session key 
during subsequent communications between the communications network and the 
user terminal. 

2. (original) The method according to claim 1 , further comprising the step 

of: 

logging off the user terminal in response to an encrypted logoff request from 
the user terminal accompanied by the secure seed. 

3. (original) The method according to claim 1, wherein the periodically 
generating step comprises generating the subsequent session key by concatenating 
the current session key with the secure seed and applying a hash algorithm. 
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4. (previously presented) A method for providing a secure 
communications session with a mobile terminal in a wireless local area network, the 
method comprising the steps of: 

transmitting a secure key and a secure seed to the mobile terminal using a 
secure communications method, the secure key and the secure seed being suitable 
for storage in the mobile terminal for use during the secure communications session; 

encrypting and transmitting data to the mobile terminal using a current 
session key, and receiving and decrypting data received from the mobile terminal 
using the current session key, the secure key initially being used as the current 
session key; and 

periodically generating by an access point a subsequent session key using 
the secure seed and using the subsequent session key as the current session key 
during subsequent communications with the mobile terminal. 

5. (currently amended) The method as in claim 4, wherein the 
periodically generating step comprises generating by the AP access point a 
subsequent session key using a combination of a new key and the secure seed, the 
new key being generated using the secure key. 

6. (currently amended) The method as in claim 5, wherein the 
periodically generating step comprises generating by the AR access point a 
subsequent session key by concatenating the new key and the secure seed and 
running a hash algorithm to generate the subsequent session key. 
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7. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network, the method 
comprising the steps of: 

generating a secure key; 

transmitting the secure key to the mobile terminal using a secure 
communications method, the secure key being stored in the mobile terminal for use 
during the secure communications session; 

encrypting and transmitting data to the mobile terminal using a current 
session key, and receiving and decrypting data received from the mobile terminal 
using the current session key; and 

ending the secure communication© session by an access point in response 
to receiving a logoff message from the mobile terminal, the logoff message being in 
encrypted form and including the secure key. 



8. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network, the method 
comprising the steps of: 

generating a secure key and a secure seed; 

transmitting the secure key and the secure seed to the WLAN wireless local 
area network using a secure communications method, the secure key and the 
secure seed being stored in the WLAN wireless local area network for use during 
the secure communications session; 

encrypting and transmitting data to the WLAf4 wireless local area network 
using a current session key, and receiving and decrypting data received from the 
WLAN wireless local area network using the current session key, the secure key 
initially being used as the current session key; and 

periodically generating by the mobile terminal a subsequent session key 
using the secure seed and using the subsequent session key as the current session 
key during subsequent communications with the WLAN wireless local area network . 



- 4 - 



CUSTOMER NO.: 24498 PATENT 
Ser. No. 10/549,408 PU030081 
Date of Office Action: 01/1 1/08 
Response dated: 04/23/08 

9. (original) The method as in claim 8, wherein the periodically 
generating step comprises generating by the mobile terminal a subsequent session 
key using a combination of a new key and the secure seed, the new key being 
generated using the secure key. 

10. (original) The method as in claim 9, wherein the periodically 
generating step comprises generating by the mobile terminal a subsequent session 
key by concatenating the new key and the secure seed and running a hash 
algorithm to generate the subsequent session key. 

1 1 . (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network, the method 
comprising the steps of: 

generating a secure key; 

receiving the secure key from the WLAN wireless local area network using a 
secure communications method, the secure key being stored in the WLAN wireless 
local area network for use during the secure communications session; 

encrypting and transmitting data to the WLAN wireless local area network 
using a current session key, and receiving and decrypting data received from the 
WLAN wireless local area network using the current session key; and 

ending the secure communications session in response to receiving a logoff 
message from the WLAN wireless local area network , the logoff message being in 
encrypted form and including the secure key. 
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12. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network, the method 
comprising the steps of: 

installing at least two shared secrets on both the mobile terminal and the 
WLAN wireless local area network access point during the user authentication 
phase whereby a first secret is the initial session key and a second secret is utilized 
as secure seed to generate subsequent session keys. 

13. (currently amended) The method as in claim 12, further comprising the 
step of generating a new key and encrypting the new key with the current session 
key and exchanging and the new key between the WLAN wireless local area 
network and the mobile terminal. 

14. (currently amended) The method as in claim 12, further comprising the 
step of the WLAN wireless local area network and the mobile terminal generating a 
new session key employing the new session key and the secure seed. 

15. (original) The method as in claim 14, wherein generating the new 
session key generation comprises the step of concatenating the said new session 
key to the secure seed. 

16. (original) The method as in claim 15, further comprising the step of 
generating a new session key by applying a hash algorithm on said concatenated 
result. 

17. (currently amended) The method as in claim 16, further comprising the 
step of using the said new session key in communications between the WLAN 
wireless local area network and mobile terminal. 
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18. (previously presented) A method for providing a secure 
communications session between a mobile terminal and a wireless local area 
network, the method comprising the steps of: 

a mobile terminal sending during session logoff an encrypted logoff request 
accompanied by the secure seed such that the secure seed appears in the logoff 
request. 



19. (previously presented) An access point for providing a secure 
communications session between a mobile terminal and a wireless local area 
network, comprising: 

a means for transmitting a secure key and a secure seed to the mobile 
terminal using a secure communications method; 

a means to encrypt data using the secure key; and 

a means to periodically generate a subsequent session key using the secure 

seed. 



20. (original) A terminal device for providing a secure communications 
session with a communications network, comprising: 

a means to receive a secure key and a secure seed and a means to store the 
secure key and the secure seed for use during the secure communications session; 

a means to receive data and a means to decrypt the data using a current 
session key during the secure communications session, the secure key being using 
initially as the current session key; and 

a means to generate a subsequent session key using the current session key 
and the secure seed, the subsequent session key thereafter being used as the 
current session key for subsequent communications. 
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21 . (previously presented) The terminal device according to claim 20, 
wherein the terminal device comprises a mobile terminal and the communications 
network comprises a wireless local area network. 

22. (original) The access point according to claim 24, wherein the means 
to periodically generate a subsequent session key comprises a means to generate a 
subsequent session key using a combination of a new key and the secure seed, the 
new key being generated by means using the secure key. 

23. (original) The access point according to claim 24, wherein the means 
to periodically generate a subsequent session key comprises a means to generate a 
subsequent session key by concatenating a new key and the second secure seed 
and a means for running a hash algorithm to generate the subsequent session key. 

24. (previously presented) An access point for providing a secure 
communications session between a mobile terminal and a wireless local area 
network, comprising: 

a means to transmit a secure key and a secure seed and a means to store 
the secure key and the secure seed for use during the secure communications 
session; 

a means to encrypt data and a means to transmit data to the mobile terminal 
and a means to receive data and a means to decrypt the data from the mobile 
terminal using a current session key during the secure communications session, the 
secure key being using initially as the current session key; and 

a means to generate a subsequent session key using the current session key 
and the secure seed, the subsequent session key thereafter being used as the 
current session key for subsequent communications. 



- 8 - 



